Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33263.roa
File:                     AS33263.roa (raw, json)
Hash identifier:          5v4CdB2MIvypiHBg9zyvnQBjDF4WqBX7SclgER2txpM=
Subject key identifier:   87:01:53:DD:E6:A4:57:4C:15:5C:27:CA:85:51:EF:F5:42:9D:F1:D2
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       2AB2DD1F654BEC1DD51DB2457DE2A1CE1E0C00CF
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33263.roa
Signing time:             Wed 07 Feb 2024 21:10:49 +0000
ROA not before:           Wed 07 Feb 2024 21:05:49 +0000
ROA not after:            Wed 05 Feb 2025 21:10:49 +0000
asID:                     33263
IP address blocks:        45.54.25.0/24 maxlen: 24
                          2607:f740:e606::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b2:dd:1f:65:4b:ec:1d:d5:1d:b2:45:7d:e2:a1:ce:1e:0c:00:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Feb  7 21:05:49 2024 GMT
            Not After : Feb  5 21:10:49 2025 GMT
        Subject: CN=870153DDE6A4574C155C27CA8551EFF5429DF1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:f2:39:7b:dc:a2:80:14:53:df:c9:80:6b:
                    a8:92:97:36:8a:39:a0:60:44:38:1c:74:12:2b:10:
                    f5:22:f6:2e:cc:ed:90:02:36:a4:7c:01:53:65:30:
                    33:d0:dd:65:27:33:0b:22:50:82:5f:42:8f:f2:1a:
                    b1:9c:df:5c:76:04:db:e8:46:6c:28:2f:08:e3:af:
                    bb:02:38:82:7d:94:9d:0b:03:44:91:62:d7:42:b1:
                    79:57:e0:e5:3d:32:fa:cd:4a:df:42:a2:ab:f4:b4:
                    30:2f:1c:7b:34:4a:e9:80:f6:be:ee:d4:e7:f4:a9:
                    ac:2c:12:dd:c5:de:11:97:aa:bf:c2:e0:c6:02:79:
                    79:69:5c:b1:0b:5c:77:fd:ce:23:f2:c2:e4:6c:03:
                    11:1d:10:cf:c9:a6:5f:20:e4:a9:b5:30:0f:fb:76:
                    75:91:42:5d:a4:ae:c9:ac:20:41:2d:9a:8c:a7:bb:
                    35:d3:c5:c9:c6:4a:ed:5e:32:59:31:4f:92:21:24:
                    ce:2a:48:88:b1:d1:31:27:12:6a:bf:5c:c2:3c:e8:
                    1c:0b:ed:f6:02:8d:de:58:2b:22:95:51:6c:6b:3e:
                    71:05:53:67:f6:07:2f:fc:0c:ad:28:e1:65:23:79:
                    31:9f:5b:d9:6f:f0:75:b6:fc:c3:63:db:23:02:5c:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:01:53:DD:E6:A4:57:4C:15:5C:27:CA:85:51:EF:F5:42:9D:F1:D2
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33263.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.25.0/24
                IPv6:
                  2607:f740:e606::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:15:03:7e:2b:43:91:98:92:3f:53:eb:a1:b9:3b:0e:0b:ae:
         a7:a9:83:c3:1e:2f:63:02:97:69:37:36:d1:52:b3:6e:f4:87:
         98:30:68:1c:c8:c9:62:5c:d0:48:97:79:e2:2a:17:f7:dc:87:
         0c:81:29:5f:d2:76:82:8e:fd:d7:67:d2:c2:64:7c:92:94:0d:
         56:3a:26:cb:3a:42:fc:39:a6:6c:be:6e:06:9d:a2:45:9d:e1:
         0e:79:00:25:b5:06:23:49:dd:50:da:c7:cc:4f:61:9f:6e:d7:
         22:ee:0d:f8:45:89:6a:51:6e:2a:84:f3:91:aa:8d:3f:39:d5:
         64:5d:11:a7:59:3a:3b:12:b1:60:81:f4:b7:71:3c:0a:b7:e3:
         48:e8:b8:ac:81:c3:b9:7b:66:e9:df:74:ec:a7:32:e5:ed:11:
         0c:1f:b1:95:ab:64:30:8e:4f:db:0f:bd:c6:54:f6:f0:a9:1d:
         00:cc:95:55:4a:50:f4:dd:11:12:31:19:96:03:f1:0b:5c:5a:
         b1:cf:ac:33:62:7b:a9:4f:2c:dc:a3:c9:9e:aa:95:b3:a7:b1:
         9d:f9:3e:23:ad:48:cf:f9:7a:86:04:eb:2f:8c:e6:ee:9c:d0:
         fb:7e:3f:65:3c:7f:3a:68:17:5b:74:e0:55:86:29:22:40:bd:
         13:02:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org